$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft File: fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json) Hash identifier: CzVYs1lHKP83WSFInWhg9OjpI7/uwGlN3WXkB4HSalk= Subject key identifier: DC:65:76:87:68:8A:E4:E9:ED:61:91:17:26:85:75:4D:B7:AC:A6:55 Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F Certificate issuer: /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft Manifest number: 0601 Signing time: Fri 30 May 2025 23:05:13 +0000 Manifest this update: Fri 30 May 2025 23:05:12 +0000 Manifest next update: Fri 06 Jun 2025 23:05:12 +0000 Files and hashes: 1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: GqcwbzD3ofMnDiussbuA8vug7Vnj/vpj9yn4/X/OUwk=) 2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: g0yk2bIJuIxlslA37+MYT7bVXA+9AB9etIi570IlrAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Validity Not Before: May 30 23:05:12 2025 GMT Not After : Jun 6 23:05:12 2025 GMT Subject: CN=683a39a9-77d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:b4:a1:4d:84:7b:e2:55:67:28:11:ac:f0: 75:4a:1f:ae:a1:ad:02:a9:aa:da:a8:f9:27:4c:62: 70:66:b8:e2:f7:a1:53:73:49:e5:b3:a8:84:ce:c2: 33:9a:9b:7e:f9:00:20:eb:83:9c:fb:94:e8:9c:4e: 56:50:83:da:4b:d0:7a:24:d7:54:dc:45:9b:19:28: 2f:d9:c4:6e:ed:02:c3:84:eb:a3:37:d7:e9:04:2b: 6b:14:16:e3:66:bd:f8:43:b2:be:f6:19:8f:1e:bc: de:2c:54:c2:6c:38:76:13:f8:7b:20:bb:b5:a0:d0: 30:9c:e5:1a:90:c4:f7:15:02:d6:77:2d:e3:6c:ad: 25:8b:d0:53:9c:de:21:e8:6b:5c:bc:b0:1b:7a:41: 70:3b:af:db:46:a9:ff:8d:ba:88:b4:96:35:db:06: 4e:56:41:1e:e4:bb:b9:78:59:1a:e4:b9:23:11:57: a8:83:99:d0:22:df:38:f6:b3:5b:28:13:a4:99:a4: 3d:72:cf:71:fb:43:ca:ba:45:08:ce:0b:81:a5:1d: 20:f6:90:f1:74:05:9b:7e:ed:6e:50:dc:40:70:e1: 59:22:73:8c:17:58:91:82:e0:7f:ec:be:8a:46:1d: 25:7a:0a:da:5f:6d:39:74:19:a4:79:bb:a3:8a:af: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:65:76:87:68:8A:E4:E9:ED:61:91:17:26:85:75:4D:B7:AC:A6:55 X509v3 Authority Key Identifier: keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e7:14:a9:61:8d:96:61:5d:d6:1d:ce:b7:1f:d6:f3:8f:02: 7e:46:30:0a:59:e6:42:e0:79:21:1b:69:39:b3:5e:ee:45:26: c2:0a:04:30:8b:86:c1:4f:28:a5:a3:fe:c5:f7:68:c5:90:de: d8:3f:b2:ff:fa:08:89:51:07:4c:86:0a:31:30:91:ba:7c:8a: 47:b1:34:d3:6b:61:7c:2b:7f:47:e3:29:55:6f:82:a5:e2:53: da:8f:a0:68:29:f2:8d:1a:50:73:dc:5a:ff:aa:2a:47:b8:0d: 26:d0:24:da:ff:39:a7:c4:1d:e7:cd:75:0c:7c:ab:23:47:d7: de:a4:ea:dc:7d:87:6b:09:a5:f2:b6:c6:05:a6:2a:df:1c:24: 09:43:ad:25:19:08:31:a1:d7:7d:9e:ad:99:50:41:06:2d:7a: 41:3d:b5:38:19:6c:ea:64:ad:9a:1a:11:9d:b6:68:ef:e2:d2: a3:81:d0:82:b7:33:73:99:6d:ae:67:45:4a:82:70:12:c3:97: c4:39:06:ae:20:87:bc:26:3e:d3:80:97:9f:c0:50:43:7f:47: 85:dd:8a:83:16:0b:4b:c5:f0:8e:cf:af:34:ac:ab:19:1d:91: 80:b9:c6:fd:93:3f:16:11:49:80:a6:f2:e0:28:91:99:59:0c: ad:00:a7:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBRjkxMTAvBgNVBAUTKDdFRTNCODhGQjFBRjBEOTJEQkQyMTY2MTI1RkIwOUNC MjRGMTA4M0YwHhcNMjUwNTMwMjMwNTEyWhcNMjUwNjA2MjMwNTEyWjAYMRYwFAYD VQQDEw02ODNhMzlhOS03N2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7q0oU2Ee+JVZygRrPB1Sh+uoa0CqaraqPknTGJwZrji96FTc0nls6iEzsIz mpt++QAg64Oc+5TonE5WUIPaS9B6JNdU3EWbGSgv2cRu7QLDhOujN9fpBCtrFBbj Zr34Q7K+9hmPHrzeLFTCbDh2E/h7ILu1oNAwnOUakMT3FQLWdy3jbK0li9BTnN4h 6GtcvLAbekFwO6/bRqn/jbqItJY12wZOVkEe5Lu5eFka5LkjEVeog5nQIt849rNb KBOkmaQ9cs9x+0PKukUIzguBpR0g9pDxdAWbfu1uUNxAcOFZInOMF1iRguB/7L6K Rh0legraX205dBmkebujiq/BQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxldodo iuTp7WGRFyaFdU23rKZVMB8GA1UdIwQYMBaAFH7juI+xrw2S29IWYSX7Ccsk8Qg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFGOS8yOUNEQ0Q4RUE3 RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRaTGIwaFpoSmZzSnl5VHhD RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1TzRqN0d2RFpMYjBoWmhKZnNKeXlUeENEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFGOS8yOUNEQ0Q4RUE3RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRa TGIwaFpoSmZzSnl5VHhDRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+5xSpYY2WYV3WHc63H9bzjwJ+RjAKWeZC4HkhG2k5s17uRSbCCgQw i4bBTyilo/7F92jFkN7YP7L/+giJUQdMhgoxMJG6fIpHsTTTa2F8K39H4ylVb4Kl 4lPaj6BoKfKNGlBz3Fr/qipHuA0m0CTa/zmnxB3nzXUMfKsjR9fepOrcfYdrCaXy tsYFpirfHCQJQ60lGQgxodd9nq2ZUEEGLXpBPbU4GWzqZK2aGhGdtmjv4tKjgdCC tzNzmW2uZ0VKgnASw5fEOQauIIe8Jj7TgJefwFBDf0eF3YqDFgtLxfCOz680rKsZ HZGAucb9kz8WEUmApvLgKJGZWQytAKdW -----END CERTIFICATE-----Generated at Sat May 31 16:43:59 2025 by rpki-client